On the intersection of Information Centric Networking and Delay Tolerant Networking (Lessons learned from the GreenICN project) Jan Seedorf HFT Stuttgart Visit at HAW Hamburg December 2019 1
Outline § (Very) Short Introduction to Information Centric Networking § GreenICN Project Background • Disaster Scenario • Rationale § Overview on selected Solutions • …which we developed and evaluated § Deep Dive • Decentralised ICN Interest Popularity Estimation § Lessons Learned & Open Questions • Key Takeaways • Remaining Issues & Challenges • Discussion 2
(Very) Short Introduction to Information Centric Networking 3
Host-centric networking Trusted Connect to Server Server X and get object B Server X B Secure Connection 4 Credits: Prof. Dr. Dirk Kutscher (Hochschule Emden/Leer)
Information-Centric Networking A Trustable D copy of object B C B E Get object B D B B B E E A A A A C D Untrusted Untrusted connection host 5 Credits: Prof. Dr. Dirk Kutscher (Hochschule Emden/Leer)
ICN communication model l Clients (C) send requests (Interest Packets) asking for named data l Routers (R) in the network route requests towards publishers (P) l Any node with a cached copy can provide the corresponding information object (Data Packet) l Pending Interest Table (PIT): ”stores all the Interests that a router has forwarded but not satisfied yet“ [https://en.wikipedia.org/wiki/Named_data_networking] l Remark: - On the surface, this is exactly the service of HTTP, but the request is there always addressed to a particular host ICN Packet examples* *By NDN Consortium - named-data.net, CC BY-SA 3.0, 6 https://commons.wikimedia.org/w/index.php?curid=35288191 Credits: Prof. Dr. Dirk Kutscher (Hochschule Emden/Leer)
ICN-based Information Retrieval 101 Requestor 1 Original Owner Content “XY1” “Joe” Content Repository Requestor 2 7 Credits: Prof. Dr. Dirk Kutscher (Hochschule Emden/Leer)
8 ICN Core Properties § Accessing named data as a first-order network principle • Transmission of self-contained units § Name-content-binding validation and other security services based on object/naming security • Not based on connection security § Ability to leverage ubiquitous in-network memory • Rate adaptation • Repair (efficient re-transmissions) • Sharing (Re-use) 8 Credits: Prof. Dr. Dirk Kutscher (Hochschule Emden/Leer)
GreenICN Project Background 9
10 17.12.19 Background: GreenICN Project § GreenICN: Architecture and Applications of Green Information Centric Networking Duration: 3,16 years (1 Apr 2013 – 31 May 2016) § Website: http://www.greenicn.org § EU Coordinator: JP Coordinator: Mr. Shigehiro Ano Prof. Xiaoming Fu University of Göttingen KDDI R&D Labs Germany Japan 10
11 17.12.19 Project Consortium 11
Scenario and Use Cases ▐ Disaster Scenario l The aftermath of a disaster (hurricane, earthquake, tsunami, or a human-generated network breakdown) l E.g. the enormous earthquake which hit Northeastern Japan on March 11, 2011 (causing extensive damages incl. blackouts, fires, tsunamis and a nuclear crisis) Ø Energy and communication resources are at a premium Ø Critical to efficiently distribute disaster notification and critical rescue information ▐ Key Use Cases (High-Level) l Authorities would like to inform citizens of possible shelters, food, or of impending danger l Relatives would like to communicate with each other and be informed about their wellbeing l Affected citizens would like to make enquiries of food distribution centres, shelters or report trapped, missing people to the authorities 17.12.19 12
Key Research Challenges Ke • Communication in Fragmented Networks ( using disconnected but functional parts of the infrastructure ) • Security ( access control, message authentication ) • Traffic Prioritization / Handling Congestion ( overall capacity is reduced ) • Delay/Disruption Tolerant Approach • Energy Efficiency ( devices run on battery ) Support Routing and caching in fragmented networks Investigating energy efficient information delivery mechanisms for fragmented mobile networks. Access Control and Management in fragmented networks Designing access control and information management in fragmented networks. Refugees Implementation and validation of applications for Fragmented Network Disaster and Rescue Management Extending/adapting essential functions to support fragmented networks in disaster stricken areas and design applications 17.12.19 exploiting such functionality. 13
How ICN can be Beneficial [1,2] • Routing-by-Name • In fragmented networks, references to location-based, fixed addresses may not work as a consequence of disruptions (e.g. reachability of DNS servers) • Content-based Access Control • ICN security model can regulate access to data objects (e.g. only to a specific user or class of users) by means of content-based security • Authentication of Named Data Objects • With 'self-certifying data' approaches, the origin of data retrieved from the network can be authenticated without relying on a trusted third party or PKI • Caching • Caching can help to avoid congestion in the network (e.g. congestion in backhaul links can be avoided by delivering content from caches at access nodes) • Sessionless Communication • ICN does not require full end-to-end connectivity (facilitating a seemless aggregation between normal operations and a disaster) [1] J. Seedorf et al.: “Using ICN in disaster scenarios”, draft-irtf-icnrg-disaster-09, IRTF ICNRG, Dec. 2019 [2] J. Seedorf et al.: “The Benefit of Information Centric Networking for Enabling Communications in Disaster Scenarios”, IEEE Globecom 2015 Workshop on Information Centric Networking Solutions for Real World Applications (ICNSRA), San Diego, USA, 14 December, 2015
Research ch Gap • Quite some work in the DTN community, however most DTN work lacks key features which are needed in the disaster scenarios we consider, such as: • publish/subscribe (pub/sub) capabilities, caching, multicast delivery, message prioritisation based on content types, ... • Could enhance existing DTN approaches with these features – we argue that ICN makes a better starting point for building a communication architecture that works well before & after a disaster à Vision / Rationale: Start with existing ICN approaches and extend them with the necessary features needed in disaster scenarios 17.12.19 15
Overview on selected Solutions 16
Se Select cted Resu sults s • ICN ’Data Mules’ [2] [3] • Logical interface, multipath support ICN Data Mules in a Disaster Scenario [2] T. Yagyu and S. Maeda, “Demo Overview: Reliable Contents Retrieval in Fragmented ICNs for Disaster Scenario,” ACM ICN Conf., Sep. 2014. [3] K. Sugiyama et al., “Multipath Support for Name-based Information Dissemination in Fragmented Networks,” ACM ICN Conf., Sep./Oct. 2015. 17.12.19 17
Se Select cted Resu sults s • ICN ’Data Mules’ • Priority dependent Name-based Replication (NREP) [4] • Routing/forwarding decisions based on name/attributes • E.g. attaching priority & time/space restrictions to interests More Replications till Expiry for High Priority Messages [4] I. Psaras et al., “Name-based replication priorities in disaster cases,” in 2 nd Workshop on Name Oriented Mobility NOM), 2014. 17.12.19 18
Se Select cted Resu sults s • ICN ’Data Mules • Priority dependent Name-based Replication (NREP) • Data-centric Confidentiality/Access Control/Authentication [5] • Multi-authority ’Ciphertext-Policy Attribute Based Encryption’ ICN security architecture • Example Policy: allow access only to recipients who fulfill: Execution Time for CP-ABE Encryption and Decryption functions vs number of attributes that form the policy [5] T. Asami et al., “D2.3.1 - initial solution for access control and management in fragmented networks,” GreenICN Project, GreenICN Project Deliverable, 2013 17.12.19 19
Se Select cted Resu sults s • ICN ’Data Mules’ • Priority dependent Name-based Replication (NREP) • Data-centric Confidentiality/Access Control/Authentication [6][7] • Binding between self-certifying ICN names and Real-World Identities via a Web-of-Trust (WoT) • Assessing information received based on trust metric executed on the WoT graph Key idea: Nodes store complete WoT graph in a compressed format Less than 100ms for WoT with 2 Million nodes Contribution: Model and Open Source Library for synthesizing WoT graphs of arbitrary size [*] Runtime (in ns) for Decentralised Authentication Approach on Web-of-Trust Graphs of various Sizes (Median) [6] J. Seedorf, D. Kutscher, and F. Schneider: „Decentralised binding of self-certifying names to real-world identities for assessment of third-party messages in fragmented mobile networks," 2nd Workshop on Name Oriented Mobility (NOM), 2014 [7] J. Seedorf et al.: “Demo overview: Fully decentralised authentication scheme for icn in disaster scenarios (demonstration on mobile terminals),” in 1st ACM Conference on Information-Centric Networking (ICN-2014), 2014. 20 [*] https://github.com/BenjaminSchiller/GTNA/tree/master/src/gtna 17.12.19
Recommend
More recommend
